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Remarks 

Reconsideration of this Application is respectfully requested. 

Upon entry of the foregoing amendment, claims 1-22 are pending in the 
application, with 1, 2, and 16 being the independent claims. These changes are believed 
to introduce no new matter, and their entry is respectfully requested. 

Based on the above amendment and the following remarks, Applicant 
respectfully requests that the Examiner reconsider all outstanding objections and 
rejections and that they be withdrawn. 

Rejections Under 35 U.S.C. $ 112 

The Examiner has rejected claim 19 under 35 U.S. C. § 1 12, second paragraph, as 
allegedly being indefinite. Claim 19 has been amended to recite a "system" in 
accordance with the system recited in independent claim 16. Accordingly, the 
Examiner's rejection of claim 19 is rendered moot, and Applicant respectfully requests 
that the rejection be withdrawn. 

The Examiner has rejected claim 20 under 35 U.S.C. § 1 12, second paragraph, as 
allegedly being indefinite. Claim 20 has been amended to recite a dependency on claim 
16. Accordingly, the Examiner's rejection of claim 20 is rendered moot, and Applicant 
respectfully requests that the rejection be withdrawn. 

The Examiner has rejected claim 12 under 35 U.S.C. §112, second paragraph, as 
allegedly being indefinite. Claim 12 has been amended to recite a "multilinear" 
algorithm. A similar typographical correction is presented in an amendment to the 
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specification. Accordingly, the Examiner's rejection of claim 12 is rendered moot, and 

Applicant respectfully requests that the rejection be withdrawn. 

Rejections Under 35 U.S.C. S 102 

The Examiner has rejected claims 1-22 under 35 U.S.C. § 102(a) as being 
anticipated by U.S. Patent No. 6,708,218 to Ellington, Jr. et al. ("Ellington"). For the 
reasons set forth below, Applicant respectfully submits that Ellington does not anticipate 
claims 1-22. Accordingly, Applicant respectfully traverses. 

Claim 1 

Independent claim 1 is directed to: 

1 . A method of processing a packet having a plurality of 
layers, comprising: 

processing a first layer in accordance with a first protocol; 

and 

processing a second layer in accordance with a second 
protocol in parallel with processing of said first layer when 
processing of said first layers uncovers sufficient information to 
support processing of said second layer. 
The Examiner asserts that Ellington teaches "processing a first layer" and 
"processing a second layer" in accordance with a first and second protocol in parallel. 
(Office Action, p. 3). The Examiner further states that "the determination of a frame as 
being IP frame or an IPSec frame via the MAC header and protocol field in the IP header 
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as examined in the data link control layer clearly encompasses the claimed limitations as 
broadly interpreted by the examiner." 

Applicant submits that Ellington nowhere teaches or suggests "processing a first 
layer" and "processing a second layer" as recited in claim 1 . Ellington is directed strictly 
to the processing of IP and IPSec frames, which occupy a common layer. For example, 
in Ellington, it is possible to identify whether a frame is an IPSec frame or a regular IP 
frame by examining the "data link control layer." (Ellington, col. 3, 1. 47). 

Furthermore, because Ellington does not teach or suggest a "first layer" and a 
"second layer", Ellington likewise cannot teach or suggest processing the "second layer" 
in parallel with the "first layer" when "processing of said first layers uncovers sufficient 
information to support processing of said second layer." The Examiner refers to the 
determination, in Ellington, of whether a frame is an IP frame or an IPSec frame to show 
processing after sufficient information is uncovered. 

Ellington does not indicate the use of a dependency whereby processing of a 
"second layer" is dependent on the uncovering of sufficient information during the 
processing of a "first layer." The Examiner appears to suggest that this dependency 
occurs in the step of examining the IP header at the data link control layer to identify IP 
and IPSec traffic. (Ellington, col. 3, 11. 44-47). However, Ellington nowhere teaches or 
suggests that the processing of a subsequent IP or IPSec frame is dependent on the 
processing of a previous IP or IPSec frame. Accordingly, Ellington cannot be said to 
teach or suggest "processing of said first layers [to] uncover sufficient information to 
support processing of said second layer". For each of the aforementioned reasons, 
Ellington cannot be said to anticipate independent claim 1 . 
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Claims 2-15, 21, and 22 

Independent claim 2 is directed to: 

2. A method of processing a data packet according to a 
plurality of security policies, comprising the steps of: 

(a) receiving the packet; 

(b) identifying a first security policy; 

(c) processing the packet according to the first security 

policy; 

(d) identifying a second security policy when 
information necessary for said identification of the second security 
policy becomes available; and 

(e) processing the packet according to the second 
security policy, concurrently with step (c). 

The Examiner asserts that Ellington teaches processing the packet according to a 
first and second security policy. Specifically, the Examiner states that "IPSec inherently 
uses Security association management (SA) and key exchange", suggesting that the 
architecture of IPSec accounts for first and second security policies. (Office Action, p. 
4-5) 

Applicant submits that Ellington nowhere teaches or suggests processing a packet 
according to a first security policy, then processing the same packet according to a 
second security policy. Ellington discusses IPSec security policies in column 6, lines 19- 
48 in referring to a determination of which packets should be processed by IPSec. The 



Atty. Docket No. 1875.1310002 



- 1 1 - Jeffrey D. CARR 

Appl.No. 10/053,904 

security policies in Ellington are applied to a stream of packets through the use of filters 
for testing individual packets, (Ellington, col. 4, 11. 30-33). The security policies are 
nowhere applied to a same packet more than once. For each of the aforementioned 
reasons, Ellington cannot be said to anticipate independent claim 2. 

Applicant submits that dependent claims 3-15, 21, and 22 are not anticipated by 
Ellington for at least the same reasons as independent claim 2 from which they depend, 
and further in view of their own respective features. Accordingly, the Examiner's 
rejection of claims 3-15, 21, and 22 under 35 U.S.C. § 102(a) is traversed and Applicant 
respectfully requests that the rejection be withdrawn. 

Claims 16-20 

Independent claim 16 is directed to: 

16. A system for processing a data packet according to a 
plurality of security policies, wherein processes that effect 
respective security policies can execute in parallel, the system 
comprising: 

a packet identification (PID) parser that identifies the 

packet; 

a plurality of security processing modules, each of which 
can process the packet according to one of the security policies in 
parallel with at least one other security processing module; and 
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at least one feedback loop or feeding output of at least one 

of said security processing modules to at least one other security 

processing module. 

The Examiner has rejected independent claim 16 for the same reasons as 

provided in the rejection of independent claim 2. Accordingly, claim 16 is not 

anticipated by Ellington for similar reasons as stated above with regards to independent 

claim 2. Furthermore, Applicant submits that Ellington nowhere teaches or suggests a 

"packet identification parser" or a "feedback loop", and the Examiner does not refer to 

any analogous structure in Ellington. For each of the aforementioned reasons, Ellington 

cannot be said to anticipate independent claim 16. 

Applicant submits that dependent claims 17-20 are not anticipated by Ellington 

for at least the same reasons as independent claim 16 from which they depend, and 

further in view of their own respective features. Accordingly, the Examiner's rejection of 

claims 17-20 under 35 U.S.C. § 102(a) is traversed and Applicant respectfully requests 

that the rejection be withdrawn. 
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Conclusion 



All of the stated grounds of objection and rejection have been properly traversed, 
accommodated, or rendered moot. Applicant therefore respectfully requests that the 
Examiner reconsider all presently outstanding objections and rejections and that they be 
withdrawn. Applicant believes that a full and complete reply has been made to the 
outstanding Office Action and, as such, the present application is in condition for 
allowance. If the Examiner believes, for any reason, that personal communication will 
expedite prosecution of this application, the Examiner is invited to telephone the 
undersigned at the number provided. 

Prompt and favorable consideration of this Amendment and Reply is respectfully 
requested. 



Respectfully submitted, 




Robert Sokohl 
Attorney for Applicant 
Registration No. 36,013 




1 100 New York Avenue, N.W. 
Washington, D.C. 20005-3934 
(202)371-2600 
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